We currently support the latest released minor version.
Please open a private report by emailing the maintainers (see repository owners) with details and reproduction steps. Do not open public issues for potential vulnerabilities. We aim to acknowledge reports within 5 business days.
We will coordinate a fix and publish a patch release. You may request credit in the release notes.